kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
freebsd-ports/security/shibboleth2-sp/Makefile

62 lines
1.6 KiB
Makefile
Raw Normal View History

Convert security to new options framework
2013-04-28 23:02:39 +02:00
# Created by: Janos Mohacsi <janos.mohacsi@bsd.hu>
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
# $FreeBSD$
PORTNAME= shibboleth-sp
Security update for apache-xml-security-c. Dependant ports, especially shibboleth2-sp, opensaml2, xmltooling and log4shib should all be updated. Security: CVE-2013-2156
2013-06-18 17:15:48 +02:00
PORTVERSION= 2.5.2
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
CATEGORIES= security www
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
MASTER_SITES= http://shibboleth.net/downloads/service-provider/${PORTVERSION}/
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
MAINTAINER= girgen@FreeBSD.org
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
COMMENT= C++ Shibboleth Service Provider (Internet2) for Apache
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
LIB_DEPENDS= saml.8:${PORTSDIR}/security/opensaml2
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
Add build dependency on boost for shibboleth and opensaml. PR: ports/179431
2013-06-09 16:41:24 +02:00
BUILD_DEPENDS= boost-libs>=0:${PORTSDIR}/devel/boost-libs
- Update to 2.3.1. PR: ports/136034 Submitted by: Steve Wills <steve@mouf.net> Approved by: janos.mohacsi@bsd.hu (maintainer timeout)
2010-01-26 03:35:37 +01:00
MAKE_JOBS_SAFE= yes
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
USE_GMAKE= yes
GNU_CONFIGURE= yes
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
MAKE_ENV= NOKEYGEN=YES
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
USE_LDCONFIG= yes
USE_RC_SUBR= shibboleth-sp
- Update to 2.3.1. PR: ports/136034 Submitted by: Steve Wills <steve@mouf.net> Approved by: janos.mohacsi@bsd.hu (maintainer timeout)
2010-01-26 03:35:37 +01:00
LATEST_LINK= shibboleth2-sp
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
USERS= shibd
GROUPS= shibd
USE_APACHE= 22-24
USE_OPENSSL= yes
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
.include <bsd.port.pre.mk>
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
.if ${APACHE_VERSION} == 22
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
CONFIGURE_ARGS= --enable-apache-22 --with-apxs22=${APXS}
- Update to 2.3.1. PR: ports/136034 Submitted by: Steve Wills <steve@mouf.net> Approved by: janos.mohacsi@bsd.hu (maintainer timeout)
2010-01-26 03:35:37 +01:00
PLIST_SUB+= WITH_APACHE_22=""
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
PLIST_SUB+= WITH_APACHE_24="@comment "
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
.else
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
CONFIGURE_ARGS= --enable-apache-24 --with-apxs24=${APXS}
- Update to 2.3.1. PR: ports/136034 Submitted by: Steve Wills <steve@mouf.net> Approved by: janos.mohacsi@bsd.hu (maintainer timeout)
2010-01-26 03:35:37 +01:00
PLIST_SUB+= WITH_APACHE_22="@comment "
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
PLIST_SUB+= WITH_APACHE_24=""
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
.endif
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
SUB_LIST+= SH=${SH}
PLIST_SUB+= WWWOWN=${WWWOWN} WWWGRP=${WWWGRP}
SUB_LIST+= SHIBD_USER=${USERS}
SUB_LIST+= SHIBD_GROUP=${GROUPS}
PLIST_SUB+= SHIBD_USER=${USERS}
PLIST_SUB+= SHIBD_GROUP=${GROUPS}
- Update to 2.3.1. PR: ports/136034 Submitted by: Steve Wills <steve@mouf.net> Approved by: janos.mohacsi@bsd.hu (maintainer timeout)
2010-01-26 03:35:37 +01:00
CONFIGURE_ARGS+= --localstatedir=/var --with-log4shib=${LOCALBASE}
CONFIGURE_ARGS+= --with-openssl=${OPENSSLBASE} --with-xmltooling=${LOCALBASE}
CONFIGURE_ARGS+= --disable-doxygen-doc
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
Update Shibboleth-sp and its tool chain to 2.5.1. Note that from 2.5, shibd is run as the user shibd. The port tries to fix the key file ownership but if you have changed the file name of the key from the default sp-key.pem, make sure you chown your key file(s) to user shibd. Also, take maintainership of the entire tool chain (approved by all previous maintainers). Incorporates the ideas suggested by Craig Leres [177668], making sure that the ssl key is not added to the package. PR: 177668, 178694
2013-06-04 19:29:21 +02:00
post-install:
${CHOWN} -R ${USERS}:${GROUPS} /var/cache/shibboleth ;\
${CHOWN} -R ${USERS}:${GROUPS} /var/log/shibboleth ;\
${CHOWN} -R ${USERS}:${WWWGRP} /var/run/shibboleth ;\
${CHMOD} -R u=rwx,g=rx,o= /var/run/shibboleth
Mark as only for i386-6. Based on: PR: ports/115474 Submitted by: maintainer
2007-09-30 12:33:03 +02:00
Shibboleth is standards-based, open source middleware software which provides Web Single SignOn (SSO) across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. This software is a C++ implementation of the Service Provider component of the Shibboleth can be used in Apache Web servers. The service provider manages secured resources. User access to resources is based on assertions received by the service provider (SP) from an identity provider. WWW: http://shibboleth.internet2.edu/ PR: ports/114663 Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu>
2007-08-04 01:21:25 +02:00
.include <bsd.port.post.mk>
Reference in a new issue Copy permalink